CVE-2026-46170

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-46170", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2026-05-13T15:03:33.103Z", "datePublished": "2026-05-28T09:36:25.184Z", "dateUpdated": "2026-11-06T16:13:42.987Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2026-09-14T11:58:24.772Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nmptcp: pm: ADD_ADDR rtx: free sk if last\n\nWhen an ADD_ADDR is retransmitted, the sk is held in sk_reset_timer(),\nand released at the end.\n\nIf at that moment, it was the last reference being held, the sk would\nnot be freed. sock_put() should then be called instead of __sock_put().\n\nBut that's not enough: if it is the last reference, sock_put() will call\nsk_free(), which will end up calling sk_stop_timer_sync() on the same\ntimer, and waiting indefinitely to finish. So it is needed to mark that\nthe timer is done at the end of the timer handler when it has not been\nrescheduled, not to call sk_stop_timer_sync() on \"itself\"."}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["net/mptcp/pm.c"], "versions": [{"version": "00cfd77b9063dcdf3628a7087faba60de85a9cc8", "lessThan": "aa8cabde7e83bf96269ee47427dc9b59e3ed8e60", "status": "affected", "versionType": "git"}, {"version": "00cfd77b9063dcdf3628a7087faba60de85a9cc8", "lessThan": "1f26487e83e69462540bb1047139472957c913c6", "status": "affected", "versionType": "git"}, {"version": "00cfd77b9063dcdf3628a7087faba60de85a9cc8", "lessThan": "5da972efed3dc7599da6e2b5e8d906d1b7b1a728", "status": "affected", "versionType": "git"}, {"version": "00cfd77b9063dcdf3628a7087faba60de85a9cc8", "lessThan": "6a3af482188f6db4186d1605f64d911d7330abb3", "status": "affected", "versionType": "git"}, {"version": "00cfd77b9063dcdf3628a7087faba60de85a9cc8", "lessThan": "531c537b8fb620beabccfb1594e8d43cbebbb87a", "status": "affected", "versionType": "git"}, {"version": "00cfd77b9063dcdf3628a7087faba60de85a9cc8", "lessThan": "b74ad20198652b6b39a761c277ba65ae82b1e107", "status": "affected", "versionType": "git"}, {"version": "00cfd77b9063dcdf3628a7087faba60de85a9cc8", "lessThan": "8143a224785ceaf2b0856e08d4498916f38228fb", "status": "affected", "versionType": "git"}, {"version": "00cfd77b9063dcdf3628a7087faba60de85a9cc8", "lessThan": "b7b9a461569734d33d3259d58d2507adfac107ed", "status": "affected", "versionType": "git"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["net/mptcp/pm.c"], "versions": [{"version": "5.10", "status": "affected"}, {"version": "0", "lessThan": "5.10", "status": "unaffected", "versionType": "semver"}, {"version": "5.10.270", "lessThanOrEqual": "5.10.*", "status": "unaffected", "versionType": "semver"}, {"version": "5.15.218", "lessThanOrEqual": "5.15.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.1.185", "lessThanOrEqual": "6.1.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.6.142", "lessThanOrEqual": "6.6.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.12.92", "lessThanOrEqual": "6.12.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.18.30", "lessThanOrEqual": "6.18.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.0.7", "lessThanOrEqual": "7.0.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.1", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "cpeApplicability": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.10", "versionEndExcluding": "5.10.270"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.10", "versionEndExcluding": "5.15.218"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.10", "versionEndExcluding": "6.1.185"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.10", "versionEndExcluding": "6.6.142"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.10", "versionEndExcluding": "6.12.92"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.10", "versionEndExcluding": "6.18.30"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.10", "versionEndExcluding": "7.0.7"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.10", "versionEndExcluding": "7.1"}]}]}], "references": [{"url": "https://git.kernel.org/stable/c/aa8cabde7e83bf96269ee47427dc9b59e3ed8e60"}, {"url": "https://git.kernel.org/stable/c/1f26487e83e69462540bb1047139472957c913c6"}, {"url": "https://git.kernel.org/stable/c/5da972efed3dc7599da6e2b5e8d906d1b7b1a728"}, {"url": "https://git.kernel.org/stable/c/6a3af482188f6db4186d1605f64d911d7330abb3"}, {"url": "https://git.kernel.org/stable/c/531c537b8fb620beabccfb1594e8d43cbebbb87a"}, {"url": "https://git.kernel.org/stable/c/b74ad20198652b6b39a761c277ba65ae82b1e107"}, {"url": "https://git.kernel.org/stable/c/8143a224785ceaf2b0856e08d4498916f38228fb"}, {"url": "https://git.kernel.org/stable/c/b7b9a461569734d33d3259d58d2507adfac107ed"}], "title": "mptcp: pm: ADD_ADDR rtx: free sk if last", "x_generator": {"engine": "bippy-1.2.0"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-46170", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-11-06T16:11:02.395088Z"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-11-06T16:13:42.987Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-46170", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-11-06T16:11:02.395088Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-11-06T16:11:04.495Z"}}], "cna": {"title": "mptcp: pm: ADD_ADDR rtx: free sk if last", "affected": [{"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "00cfd77b9063dcdf3628a7087faba60de85a9cc8", "lessThan": "aa8cabde7e83bf96269ee47427dc9b59e3ed8e60", "versionType": "git"}, {"status": "affected", "version": "00cfd77b9063dcdf3628a7087faba60de85a9cc8", "lessThan": "1f26487e83e69462540bb1047139472957c913c6", "versionType": "git"}, {"status": "affected", "version": "00cfd77b9063dcdf3628a7087faba60de85a9cc8", "lessThan": "5da972efed3dc7599da6e2b5e8d906d1b7b1a728", "versionType": "git"}, {"status": "affected", "version": "00cfd77b9063dcdf3628a7087faba60de85a9cc8", "lessThan": "6a3af482188f6db4186d1605f64d911d7330abb3", "versionType": "git"}, {"status": "affected", "version": "00cfd77b9063dcdf3628a7087faba60de85a9cc8", "lessThan": "531c537b8fb620beabccfb1594e8d43cbebbb87a", "versionType": "git"}, {"status": "affected", "version": "00cfd77b9063dcdf3628a7087faba60de85a9cc8", "lessThan": "b74ad20198652b6b39a761c277ba65ae82b1e107", "versionType": "git"}, {"status": "affected", "version": "00cfd77b9063dcdf3628a7087faba60de85a9cc8", "lessThan": "8143a224785ceaf2b0856e08d4498916f38228fb", "versionType": "git"}, {"status": "affected", "version": "00cfd77b9063dcdf3628a7087faba60de85a9cc8", "lessThan": "b7b9a461569734d33d3259d58d2507adfac107ed", "versionType": "git"}], "programFiles": ["net/mptcp/pm.c"], "defaultStatus": "unaffected"}, {"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "5.10"}, {"status": "unaffected", "version": "0", "lessThan": "5.10", "versionType": "semver"}, {"status": "unaffected", "version": "5.10.270", "versionType": "semver", "lessThanOrEqual": "5.10.*"}, {"status": "unaffected", "version": "5.15.218", "versionType": "semver", "lessThanOrEqual": "5.15.*"}, {"status": "unaffected", "version": "6.1.185", "versionType": "semver", "lessThanOrEqual": "6.1.*"}, {"status": "unaffected", "version": "6.6.142", "versionType": "semver", "lessThanOrEqual": "6.6.*"}, {"status": "unaffected", "version": "6.12.92", "versionType": "semver", "lessThanOrEqual": "6.12.*"}, {"status": "unaffected", "version": "6.18.30", "versionType": "semver", "lessThanOrEqual": "6.18.*"}, {"status": "unaffected", "version": "7.0.7", "versionType": "semver", "lessThanOrEqual": "7.0.*"}, {"status": "unaffected", "version": "7.1", "versionType": "original_commit_for_fix", "lessThanOrEqual": "*"}], "programFiles": ["net/mptcp/pm.c"], "defaultStatus": "affected"}], "references": [{"url": "https://git.kernel.org/stable/c/aa8cabde7e83bf96269ee47427dc9b59e3ed8e60"}, {"url": "https://git.kernel.org/stable/c/1f26487e83e69462540bb1047139472957c913c6"}, {"url": "https://git.kernel.org/stable/c/5da972efed3dc7599da6e2b5e8d906d1b7b1a728"}, {"url": "https://git.kernel.org/stable/c/6a3af482188f6db4186d1605f64d911d7330abb3"}, {"url": "https://git.kernel.org/stable/c/531c537b8fb620beabccfb1594e8d43cbebbb87a"}, {"url": "https://git.kernel.org/stable/c/b74ad20198652b6b39a761c277ba65ae82b1e107"}, {"url": "https://git.kernel.org/stable/c/8143a224785ceaf2b0856e08d4498916f38228fb"}, {"url": "https://git.kernel.org/stable/c/b7b9a461569734d33d3259d58d2507adfac107ed"}], "x_generator": {"engine": "bippy-1.2.0"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nmptcp: pm: ADD_ADDR rtx: free sk if last\n\nWhen an ADD_ADDR is retransmitted, the sk is held in sk_reset_timer(),\nand released at the end.\n\nIf at that moment, it was the last reference being held, the sk would\nnot be freed. sock_put() should then be called instead of __sock_put().\n\nBut that's not enough: if it is the last reference, sock_put() will call\nsk_free(), which will end up calling sk_stop_timer_sync() on the same\ntimer, and waiting indefinitely to finish. So it is needed to mark that\nthe timer is done at the end of the timer handler when it has not been\nrescheduled, not to call sk_stop_timer_sync() on \"itself\"."}], "cpeApplicability": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "5.10.270", "versionStartIncluding": "5.10"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "5.15.218", "versionStartIncluding": "5.10"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "6.1.185", "versionStartIncluding": "5.10"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "6.6.142", "versionStartIncluding": "5.10"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "6.12.92", "versionStartIncluding": "5.10"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "6.18.30", "versionStartIncluding": "5.10"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "7.0.7", "versionStartIncluding": "5.10"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "7.1", "versionStartIncluding": "5.10"}], "operator": "OR"}]}], "providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2026-09-14T11:58:24.772Z"}}}, "cveMetadata": {"cveId": "CVE-2026-46170", "state": "PUBLISHED", "dateUpdated": "2026-11-06T16:13:42.987Z", "dateReserved": "2026-05-13T15:03:33.103Z", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "datePublished": "2026-05-28T09:36:25.184Z", "assignerShortName": "Linux"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "Linux", "programFiles": ["net/mptcp/pm.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"lessThan": "aa8cabde7e83bf96269ee47427dc9b59e3ed8e60", "status": "affected", "version": "00cfd77b9063dcdf3628a7087faba60de85a9cc8", "versionType": "git"}, {"lessThan": "1f26487e83e69462540bb1047139472957c913c6", "status": "affected", "version": "00cfd77b9063dcdf3628a7087faba60de85a9cc8", "versionType": "git"}, {"lessThan": "5da972efed3dc7599da6e2b5e8d906d1b7b1a728", "status": "affected", "version": "00cfd77b9063dcdf3628a7087faba60de85a9cc8", "versionType": "git"}, {"lessThan": "6a3af482188f6db4186d1605f64d911d7330abb3", "status": "affected", "version": "00cfd77b9063dcdf3628a7087faba60de85a9cc8", "versionType": "git"}, {"lessThan": "531c537b8fb620beabccfb1594e8d43cbebbb87a", "status": "affected", "version": "00cfd77b9063dcdf3628a7087faba60de85a9cc8", "versionType": "git"}, {"lessThan": "b74ad20198652b6b39a761c277ba65ae82b1e107", "status": "affected", "version": "00cfd77b9063dcdf3628a7087faba60de85a9cc8", "versionType": "git"}, {"lessThan": "8143a224785ceaf2b0856e08d4498916f38228fb", "status": "affected", "version": "00cfd77b9063dcdf3628a7087faba60de85a9cc8", "versionType": "git"}, {"lessThan": "b7b9a461569734d33d3259d58d2507adfac107ed", "status": "affected", "version": "00cfd77b9063dcdf3628a7087faba60de85a9cc8", "versionType": "git"}]}, {"defaultStatus": "affected", "product": "Linux", "programFiles": ["net/mptcp/pm.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"status": "affected", "version": "5.10"}, {"lessThan": "5.10", "status": "unaffected", "version": "0", "versionType": "semver"}, {"lessThanOrEqual": "5.10.*", "status": "unaffected", "version": "5.10.270", "versionType": "semver"}, {"lessThanOrEqual": "5.15.*", "status": "unaffected", "version": "5.15.218", "versionType": "semver"}, {"lessThanOrEqual": "6.1.*", "status": "unaffected", "version": "6.1.185", "versionType": "semver"}, {"lessThanOrEqual": "6.6.*", "status": "unaffected", "version": "6.6.142", "versionType": "semver"}, {"lessThanOrEqual": "6.12.*", "status": "unaffected", "version": "6.12.92", "versionType": "semver"}, {"lessThanOrEqual": "6.18.*", "status": "unaffected", "version": "6.18.30", "versionType": "semver"}, {"lessThanOrEqual": "7.0.*", "status": "unaffected", "version": "7.0.7", "versionType": "semver"}, {"lessThanOrEqual": "*", "status": "unaffected", "version": "7.1", "versionType": "original_commit_for_fix"}]}], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "480951DC-CB56-4EBC-91A2-355288564ED6", "versionEndExcluding": "6.6.142", "versionStartIncluding": "5.10", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "9CB90BD9-95B7-4D7F-9F17-4ECE6CFB66C9", "versionEndExcluding": "6.12.92", "versionStartIncluding": "6.7", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "BF39AE08-AE6D-4410-8FBE-76F6BF5BF55B", "versionEndExcluding": "6.18.30", "versionStartIncluding": "6.13", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "D0893CA7-9AE6-4DFE-AC75-48967D73AD8E", "versionEndExcluding": "7.0.7", "versionStartIncluding": "6.19", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:7.1:rc1:*:*:*:*:*:*", "matchCriteriaId": "B1EF7059-E670-45F4-B422-54C40FA86390", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:7.1:rc2:*:*:*:*:*:*", "matchCriteriaId": "0D38F0BF-A728-4133-A358-D44A2F7EE6D6", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nmptcp: pm: ADD_ADDR rtx: free sk if last\n\nWhen an ADD_ADDR is retransmitted, the sk is held in sk_reset_timer(),\nand released at the end.\n\nIf at that moment, it was the last reference being held, the sk would\nnot be freed. sock_put() should then be called instead of __sock_put().\n\nBut that's not enough: if it is the last reference, sock_put() will call\nsk_free(), which will end up calling sk_stop_timer_sync() on the same\ntimer, and waiting indefinitely to finish. So it is needed to mark that\nthe timer is done at the end of the timer handler when it has not been\nrescheduled, not to call sk_stop_timer_sync() on \"itself\"."}], "id": "CVE-2026-46170", "lastModified": "2026-11-06T17:17:42.450", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 5.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 3.6, "source": "nvd@nist.gov", "type": "Primary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-46170", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-11-06T16:11:02.395088Z", "version": "2.0.3"}}]}, "published": "2026-05-28T10:16:32.650", "references": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/1f26487e83e69462540bb1047139472957c913c6"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/531c537b8fb620beabccfb1594e8d43cbebbb87a"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/5da972efed3dc7599da6e2b5e8d906d1b7b1a728"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/6a3af482188f6db4186d1605f64d911d7330abb3"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/8143a224785ceaf2b0856e08d4498916f38228fb"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/aa8cabde7e83bf96269ee47427dc9b59e3ed8e60"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/b74ad20198652b6b39a761c277ba65ae82b1e107"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/b7b9a461569734d33d3259d58d2507adfac107ed"}], "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-noinfo"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{"bugzilla": {"description": "kernel: mptcp: pm: ADD_ADDR rtx: free sk if last", "id": "2482542", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2482542"}, "csaw": false, "cvss3": {"cvss3_base_score": "7.0", "cvss3_scoring_vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "status": "draft"}, "cwe": "CWE-911", "details": ["A flaw was found in the Linux kernel's Multipath TCP (MPTCP) implementation. When an ADD_ADDR message is retransmitted, an issue in socket (sk) reference counting can prevent the socket from being properly freed. This improper resource management may lead to a Denial of Service (DoS) condition, where the system could become unresponsive due to indefinite waiting during timer synchronization."], "name": "CVE-2026-46170", "package_state": [{"cpe": "cpe:/o:redhat:enterprise_linux:10", "fix_state": "Affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 10"}, {"cpe": "cpe:/o:redhat:enterprise_linux:6", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 6"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 9"}], "public_date": "2026-05-28T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2026-46170\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-46170\nhttps://lore.kernel.org/linux-cve-announce/2026052827-CVE-2026-46170-b7ab@gregkh/T"], "threat_severity": "Moderate"}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[00cfd77b9063dcdf3628a7087faba60de85a9cc8,b74ad20198652b6b39a761c277ba65ae82b1e107)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[00cfd77b9063dcdf3628a7087faba60de85a9cc8,8143a224785ceaf2b0856e08d4498916f38228fb)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[00cfd77b9063dcdf3628a7087faba60de85a9cc8,b7b9a461569734d33d3259d58d2507adfac107ed)"}}], "enrichment": {"confidence": 99.0, "confidence_source": "inferred", "scores": [{"score": 99.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "5.10"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[0,5.10)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.18.30,6.19.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[7.0.7,7.1.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[7.1-rc3,*]"}}], "enrichment": {"confidence": 99.0, "confidence_source": "inferred", "scores": [{"score": 99.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}], "created": "2026-05-28T13:00:21.761044+00:00", "updated": "2026-06-11T19:45:37.032634+00:00", "vendors": ["linux", "linux$PRODUCT$linux_kernel"]}